extended key usage

Hi, I'm working with an application that seems to require an X.509 Extended Key Usage of "TLS Web Client Authentication". How can I get this extension into my OpenSSL signed certificates? What is the entry in the OpenSSL config file for the Extended Key Usage parameters? Thanks, David ___

OpenSSL with Apache/PHP

Hi, I'm using Apache2 with PHP4 and OpenSSL-0.9.7a on Linux. I'm trying to sign client certificate requests with PHP script on the server. I have a couple questions. 1) On Linux, how do I tell PHP where the openssl.cnf file is, or where is the default location on Linux? I've tried setting en

ssl client authentication

hi, i'm trying to use OpenSSL s_client with OpenSC PKCS#15 engine. the engine works for operations such as key generation and PKCS#1 signatures. i've modified the s_client code to be able to use a private key on the smartcard via the OpenSC engine. i'm running into some problems with comput

agent for certificate request

hi, i want to sign a certificate request (CSR) on behalf of the requestor. i believe i would be called an agent of the requestor (is that right?). once the agent signs the CSR, i want the CA (or some intermediate program) to verify the agent and then the CA generates the certificate. the CSR i

PEM public key format

Hi, Can anyone point me to documentation describing the format of a PEM certificate? I would like to know the order of data in a public certificate, i.e. modulus, exponent, etc. Thanks! David -- David Mattes